iiot products overview - red lion sales meeting - iiot... · confidential: contents of this...

CONFIDENTIAL: Contents of this document are for internal Red Lion Controls use only.

IIoT Products Overview

Jeff Marcum


Agenda

• Value Proposition

• IIoT Product Offering

• Product Features

• SixView Manager

• Target Applications

• Summary: The Red Lion Difference


Value Proposition

Red Lion designs IIoT solutions built on defensible, differentiated

technology designed to speed development and reduce total cost of

ownership (TCO).


IIoT Product Offering & Features


IIoT Product Offering

RAM® Cellular RTUs

RAM-6021

Industrial Wired

Router

IndustrialPro® Cellular

Routers


IIoT Product Offering

RAM®

Cellular RTUs

Software Development Kit (SDK)

Modbus I/O Concentrator

Modbus Station Forward

DNP3

Split LAN/WAN Ethernet

IP Fallback

Firewall Security

Routing

Single Web-Based GUI

RS-232

RJ45 Ethernet Connection

RAM-6021 Industrial

Wired Router

Event Engine

Data Logging IndustrialPro® Cellular Routers

RAMQTT

GPS


Product Features

• All IIoT Products

– Rugged Design

– Secure Communication

– Event Engine

– Data Logging

• RAM® Product-Specific Features

– Modbus

– DNP3

– RAMQTT™

• Cellular Product-Specific Features

– Multi-Carrier Support

4/19/2017 7


Rugged Design

Safe to deploy in remote areas and harsh environments

-40 to 75° C operating temperature

Vibration: 15 g

•Meets IEC60068-2-27

Shock: 0.7 g from 13.2-100 Hz

•Meets IEC60068-2-6

UL Class 1, Div. 2, Groups A,B,C & D


Secure Communication

• Ethernet connectivity

– Layer 3 routing

– Stateful firewall

– Port forwarding and SN proxy

– Network Address Translation (NAT)

– Secure Socket Layers (SSL)

– Virtual Private Networks (VPN)

• Secure user access and data

Reduce the risk of unwanted intrusion


Layer 3 Routing

• A router is device that forwards data packets from one network to another

• Allows communication between different subnets/networks

– IT Network / Plant Network

• Provides security

– Secure tunnels, access control lists, firewall protection

• Enables remote access


Stateful Firewall

• Allows or blocks traffic based on state, port, or protocol

• Monitors all activity from the opening of a connection until it is

closed

• Filters based on

– Administrator-defined rules

– Context, for example, using information from previous connections and

packets belonging to the same connection

4/19/2017 11


Eth 0 IP 192 . 168 . 1 . 1

Mask 255 . 255 . 255 . 0

Eth 1

IP 192 . 168 . 2 . 1

Mask 255 . 255 . 255 . 0

IP 192 . 168 . 1 . 10

Mask 255 . 255 . 255 . 0

GW - 192 . 168 . 1 . 1

192 . 168 . 2 . 100

Mask 255 . 255 . 255 . 0

GW – 192 . 168 . 2 . 1

Eth 0 Eth 1

TPC Port 23 = Telnet

22 = Secure Shell 80 = Web

443 = Secure Web

502 = Modbus / TCP

UDP Port 69 = TFTP

2222 = Ethernet / IP

TPC Port 23 = Telnet


443 = Secure Web

502 = Modbus / TCP

UDP Port 69 = TFTP


Router + Stateful Firewall


Port Forwarding and SN Proxy

4/19/2017 13

Enter password

Port Forwarding

SN Proxy

Port number depends on

protocol being used. For

example, Modbus is Port

502 and Ethernet/IP is

Port 44818

https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers





Port Forwarding Details

Eth 0 IP 192 . 168 . 1 . 1

Mask 255 . 255 . 255 . 0

Eth 1

IP 192 . 168 . 2 . 1

Mask 255 . 255 . 255 . 0

IP 192 . 168 . 1 . 10

Mask 255 . 255 . 255 . 0

GW - 192 . 168 . 1 . 1

192 . 168 . 2 . 100

Mask 255 . 255 . 255 . 0

GW – 192 . 168 . 2 . 1

Eth 0 Eth 1

RAM - 6021 used as a Router and Firewall using Port Forwarding

TCP Port 23 = Telnet


443 = Secure Web

502 = Modbus / TCP

UDP Port 69 = TFTP


TCP Port 8081 = Web on Host 192 . 168 . 2 . 20 : 8080

8082 = Web on Host 192 . 168 . 2 . 201 : 80

8083 = Web on Host 192 . 168 . 2 . 202 : 80


SN Proxy Details

Eth 0 IP 192 . 168 . 1 . 1

Mask 255 . 255 . 255 . 0

Eth 1

IP 192 . 168 . 2 . 1

Mask 255 . 255 . 255 . 0

IP 192 . 168 . 1 . 10

Mask 255 . 255 . 255 . 0

GW - 192 . 168 . 1 . 1

192 . 168 . 2 . 100

Mask 255 . 255 . 255 . 0

GW – 192 . 168 . 2 . 1

Eth 0 Eth 1

Using the SN Proxy feature to provide secure access to secure our HMI

TCP Port 23 = Telnet


443 = Secure Web

502 = Modbus / TCP

UDP Port 69 = TFTP


TCP Port 8081 = Web on Host 192 . 168 . 2 . 20 : 8080


Network Address Translation (NAT)

IP 192.168.1.10Mask 255.255.255.0

GW - 192.168.1.1

192.168.2.100Mask 255.255.255.0

GW – 192.168.2.1

How it s done today

192.168.2.100Mask 255.255.255.0

GW – 192.168.2.1

192.168.2.100Mask 255.255.255.0

GW – 192.168.2.1

PLC with two interfacesInterface 1 – 192.168.1.101Interface 2 – 192.168.2.101



Network

without NAT



Eth0IP 192.168.1.101

Mask 255.255.255.0Eth1

IP 192.168.2.1Mask 255.255.255.0

Eth0 Eth1

IP 192.168.1.10Mask 255.255.255.0

GW - 192.168.1.1

192.168.2.100Mask 255.255.255.0

GW – 192.168.2.1

192.168.2.100Mask 255.255.255.0

GW – 192.168.2.1

192.168.2.100Mask 255.255.255.0

GW – 192.168.2.1

PLC with two interfacesInterface 1 – Not Needed

Interface 2 – 192.168.2.101


Interface 2 – 192.168.2.102


Interface 2 – 192.168.2.103

Eth0IP 192.168.1.102

Mask 255.255.255.0Eth1

IP 192.168.2.1Mask 255.255.255.0

Eth0 Eth1

Eth0IP 192.168.1.103

Mask 255.255.255.0Eth1

IP 192.168.2.1Mask 255.255.255.0

Eth0 Eth1


Virtual Private Network (VPN)

• Supports 2,048-bit encryption

– Banks typically use 128-bit encryption on the web

• Multiple tunnel options, including GRE tunnel, IP in IP and IPSEC

• Secure by Default

– Unique password for each unit when shipped

Internet

VPN


Event Engine Basics

• Intuitive web-based, user-configurable logic controller

– Triggers specific actions based on real-time data

– Based upon a data location value vs. setpoint or limit comparisons

• Operational data or register values

– Supports built-in I/O

– Works with system variables and user-defined internal registers

• Configure up to 99 events

• Actions include:

– Send an email or SMS message*

– Write a value to a specific register

– Run a command script (i.e. reboot device)

– Send an alert to SixView Manager® software platform

*SMS on cellular models only


Event Engine Benefits

Benefit

Limits network traffic

Reduces deployed equipment

Simple configuration

Tangible Outcome

4/19/2017 21

Reduced total cost of ownership

Minimized failure points

Quick deployment with no

engineer required


Events Screen

4/19/2017 22

Events on RAM-6021 Events on RAM-9931


Event Engine Example 1

• A simple liquid level indicator connected to a RAM® discrete input (DI1) can be configured to trigger an event when the tank level is too high

• The register value associated with the liquid level indicator/DI1 is the actual trigger for the event, which then sends a user defined SMS message, in this case “Level High”



• In this example, we’re

configuring an event called

Event1

• Data will come from a discrete

input, DI1.



• We want to act when the input

is a 1 (meaning we’ve gotten a

signal from the level sensor).

– Discrete inputs are either a 1 or a 0.

• In this case, if DI1 remains 1 for

5 seconds, then the event will

trigger.

– Waiting 5 seconds prevents false

positive readings

4/19/2017 25



• This screen determines what

action to take as a result of the

previous screen.

• If DI1 = 1 for 5 seconds, then

send an SMS Message to the

phone number listed.

4/19/2017 26

Level high



• Events can be triggered by

expressions based on other

events

In this case, Event 1 is true (enabled) only when Event 2 and Event 3 are true


Data Logging

Process

Efficiency Preventive Maintenance

Quality Control Operational Analysis

Environmental

Monitoring Communications Recovery

4/19/2017 28

• Data logging enables companies to record and analyze information about remote assets

• Easier, lower cost, and more accurate than human observation

• Helpful as a diagnostic tool to review events that happened before equipment failure

• Can be utilized as part of a preventative maintenance plan or for standards compliance

• Used as a backup in the event of communication failure


Data Logging

• Log I/O registers to internal

storage or SD card*

• Define and store multiple

simultaneous log files

• View log files in browser or

download as .csv file

• Retrieve log files via FTP

* Data logging to SD Card only supported on RAM-9000


Data Logging


Features Specific to RAM®

Products


Features Specific to RAM® Products

• Modbus

– Modbus Ethernet Master / Slave

– Modbus Serial Master / Slave

• DNP3

– DNP3 Slave

– Unsolicited Response

• RAMQTT™


What is DNP3?

• DNP3 stands for Distributed Network Protocol 3rd version.

• It came out of the power generation market and was based on

serial devices originally.

– Its main use today is still in power generation, but has become widely

utilized in water/waste water, transportation and oil & gas.


DNP3 Architecture

• The basic architecture of a

DNP3 setup is Master /

Outstation*, although that

could include one:one and

one:many configurations.

• The Red Lion RAM-XXXX family

is a DNP3 outstation only,

which MUST report to a DNP3

Master to work.

*outstations are a/k/a “slave” devices


DNP3 Basics - Events

• DNP3 uses “events” inside equipment set up to use this protocol

– How the events are used is based on how the driver is configured by the

customer / OEM

– Events in our devices are stored in NVRAM

• However, they are NOT directly readable by an outside program like a text

editor


DNP3 Basics – Polling & Classes

• DNP3 has three polling levels and one integrity poll

– The 3 polling levels (classes) allow users to assign different levels of

importance to various groups of data tags.

– The integrity poll is used to grab all data at one poll to be sure the unit is

still active.

Class 1

• Typically alarms

• Need data as fast as

possible

• Example: High level,

pump overload, site

entry

• Polling time ~ 1 min

Class 2

• Conditional tags

• Could cause an issue,

but not cause for

immediate action

• Example: Internal lights

• Polling time ~ 1-5 min

Class 3

• Lower priority

• Non-critical

information

• Example: flow

totalization or pump

runtime

• Polling time ~ 1 hr

Integrity Poll

• Make sure the device is

still alive

• Gather current status

of all points listed in

DNP3 database


DNP3 Basics – Report by Exception

• Report by exception is a feature many customers like and utilize.

• If set up in the unit, the DNP3 outstation device will proactively

communicate to the master - versus waiting until the next poll – to

report new information.

– This is also known as “unsolicited response”.


DNP3 Tradeoffs

Advantages

• Setting up both polling classes and report by exception makes it possible to get highly reliable data AND be very conservative in the amount of data transmitted (lower cost to customer) – In some real-world systems we’ve seen

data transmission reduction by as much as 90%

• Report by exception data can be seen in some cases in less than 1 second.

• Critical events can be done using report by exception to get the absolute fastest update possible

Disadvantages

• Not an easy protocol to set up

• Original configuration often

requires help from RLC sales

engineering or Tech Support

• Setting analog deadbands for

analog input report by

exception can be challenging


What is MQTT?

• Some people call MQTT “the communication protocol of IoT.”

– In reality, it is one of the communication protocols our products support.

(The others are Modbus and DNP3.)

• In MQTT communication, there are three terms to know.

Client(s)

•Any device that

has an MQTT

library running

and is

connecting to

an MQTT

broker over

any kind of

network.

Broker

•Responsible for

receiving all

messages,

filtering them,

deciding who is

interested and

then publish

the message to

all the

subscribed

clients.

Platform

•Connects the

data received

to services &

other devices,

secures the

data, can

process & act

upon the data.


What is RAMQTT™?

• RAMQTT is Red Lion’s built-in MQTT client that is

pre-configured for select IIoT platforms.

• Our value proposition is that RAMQTT is very easy & intuitive to use

compared to other solutions in the market.

– How easy?

We’ve been able to show that RAMQTT can be set up and

communicating with IIoT platforms in about two minutes


RAMQTT Client Setup

• Easy-to-use interface

• Select any or all data quickly

and intuitively

• Start communicating in ~ 2

minutes


Broadening our IIoT Support

RAMQTT

• AT&T® M2X

• Amazon® AWS™ IoT

• Telenor Connexion

• AutoDesk® Fusion Connect

• Microsoft Azure (coming soon)

• Cumulocity (coming soon)

Software Development Kits (SDK)

• TELIT® deviceWISE®

• Set-Point Ipwebcontrol

• LEC IQ Web SCADA

• Skkynet® Skkyhub™

• Distrix (SDN Security)

SDKs enable customers to build their own MQTT brokers for IIoT platforms we don’t

yet support natively.


Cellular Specific Feature

Multi-Carrier Support



• User selectable carrier through intuitive web-based interface

• Switching carriers only requires a new carrier Subscriber Identification Module (SIM) card

– No need to replace hardware

• Enables customers to easily deploy mixed-carrier solutions to ensure the best coverage

– Same hardware, different SIMs

• Helps reduce inventory

– Only one SKU needed for multiple carriers



All five carrier files are pre-loaded on each device, so switching carriers only takes approximately 3 to 5 minutes.


Product Features - Review

• Rugged Design

• Secure Communication & Networking

• Event Engine

• Data Logging

All IIoT Products

• Modbus

• DNP3

• RAMQTT

RAM®-Specific Features

• Multi-Carrier Support

Additional Cellular-Only Feature

4/19/2017 47


Cellular Product Comparison

RAM 9900 RAM 6900 RAM 6600/6800 SN 6900 SN 6600/6800

Network Speed 4G LTE 4G LTE CDMA/3G 4G LTE CDMA/3G


Built-in I/O 8 1 1

Event Engine Yes – 99 Events

RS-232 Serial 1 1 1 1 1

RS-485 Serial 1 - - - -

USB Device Port 1 1 1 1 1

USB Host Port 1 - - - -

Ethernet Port(s) 2 1 or 5 1 or 5 1 or 5 1 or 5

Wi-Fi Optional

GPS

Network Protocols Modbus RTU, Modbus TCP/IP, DNP3 slave - -

Operating Temperature -40°C to +75°C


Accessories

• Antennas, cables, power

supplies and more

– Publication: ADLD0386


SixView Manager®


SixView Manager®

• Mass configuration simplifies

and accelerates deployment

• Configurable parameters

enhance security

• Manage thousands of devices

from a central web-based

console

• Remote site management

lowers total cost of ownership

Remote Management, Monitoring & Control


SixView Manager®

• Device management software package

– Linux server required

– “Reachable” domain needed

– Possible to build a virtual machine and install locally

• Enables mass configuration and updates of deployed assets

• Offers alarming including email and SMS alerts (latest version)

• Customer owned

• No licenses required – one time purchase


Target Applications

4/19/2017 53


Target Applications

• Remote site data acquisition

• Transmission & distribution

• Wellhead monitoring

& control

• Drilling & fracturing

Oil & Gas

• Monitor water levels & flow

• Water treatment

• Well, lift station, pump &

tank control

Water/Waste

Water

• Automated Meter Reading

(AMR) backhaul to metering

gateways

• Transformer and reclosure

monitoring

• Monitoring environmental

elements in hazardous

locations

Energy &

Utilities

4/19/2017 54


Application: Cathodic Protection

• What it is – Method used to prevent corrosion

in pipelines, ships, offshore oil platforms, and other steel structures

• What we do – The cellular RTUs gather data

from discrete inputs & devices connected via Ethernet to detect leaks due to corrosion.

• Benefits – On-board I/O eliminates and/or

reduces hardware costs

– 4G LTE speeds enable faster response


Application: Utility Capacitor Banks

• What it is

– Utilities turn on/off capacitor banks in order to provide the best power based on overall demand.

• What we do

– Cellular RTU monitors status, remotely controls it, and provides communication loss fail-safe modes for added safety.

• Benefits

– Rugged design allows for outdoor installation electrical enclosure

– Integrated automation features mean lower deployment costs


Other Fixed/Stationary Applications

Water Lift Stations Electronic Signage

Rail Trackside Controls


Red Lion IIoT Products

All-in-one solution for secure remote monitoring and control

• Secure communication to remote locations regardless of environmental

conditions

• Seamlessly connect to remote field devices such as SCADA systems, PLCs,

remote I/O and other automation equipment

• Leverage Event Engine to drive control to the edge device, which can

reduce data usage

• Combines built-in I/O* and an active GPS* receiver with multiple serial and

Ethernet ports to securely monitor remote devices

• Cellular devices offer multi-carrier support for the latest 4G LTE networks

with 3G/2G fallback

*Available on RAM® Cellular RTUs


Differentiated

technology

Event Engine

RAMQTT

SixView Manager

These are “sticky” features that no one else

has, and technologies our customers value.

Speed

development

Intuitive easy-to-use web GUI

Event Engine

RAMQTT

Our products are designed to be intuitive to

use and enable customers to shorten their

time-to-revenue.

Reduce TCO Multi-carrier support

Event Engine

SixView Manager

Built-in secure networking

Data logging

Integrated I/O and Automation features

Integrated automation, networking and

control features mean lower data

consumption and reduced data costs. Carrier

agility means reduced inventory complexity

and the ability to choose the carrier that’s

right for the deployment.

Summary: The Red Lion Difference

• Red Lion designs IIoT solutions built on defensible, differentiated

technology designed to speed development and reduce total cost

of ownership.


For more information

20 Willow Springs Circle | York, PA 17406 USA

+1 (717) 767-6511 | www.redlion.net | [email protected]

Thank you.


Backup Slides


Product Selection


IndustrialPro® SN 6000 Cellular Router

• Multi-carrier 4G LTE with fallback to 3G & 2G

• 1 RS-232 serial port

• 1 or 5 Ethernet ports

• Built-in security and routing

• Web-based Graphical User Interface (GUI)

• 8-30 VDC input power

• Easy-to-use Event Engine

• -40° to 75°C operating temperature


*Note only 4G LTE models support multi-carrier operation. Default carrier represents software that unit will boot up with

IndustrialPro® SN-6000 Cellular Routers

Part Number Cellular Description Default Carrier*

SN-6900-XX 4G LTE Molex connector version Replace XX:

AT - AT&T

VZ - Verizon

AM - Generic

SN-6901-XX 4G LTE DC terminal version

SN-6901EB-XX 4G LTE Power over Ethernet

SN-6921-XX 4G LTE 5 Ethernet port version

SN-6600-XX 3G Molex connector version Replace XX:

VZ - Verizon

SN-6601-XX 3G DC terminal version

SN-6601EB-XX 3G Power over Ethernet

SN-6621-XX 3G 5 Ethernet port version

SN-6800-XX 3G Molex connector version Replace XX:

AT - AT&T

BM - Bell

TE - Telus

GE - Generic

SN-6801-XX 3G DC terminal version

SN-6801EB-XX 3G Power over Ethernet

SN-6821-XX 3G 5 Ethernet port version

CONFIDENTIAL: Contents of this document are for internal Red Lion Controls use only. 65

RAM-6021 Industrial Wired Router

• Stateful Firewall

• Port Forwarding

• SN Proxy

• NAT – ‘1 to 1’ or ‘1 to many’

• 4 layer 2 switch ports

• Secure networking with IPsec and SSL VPN

• DNP3 slave and Modbus concentrator


• Hardened, DIN-rail mountable or panel mount

• 8-30VDC or optional AC power supply


RAM® 6000 Cellular RTUs

• Multi-carrier 4G LTE with fallback to 3G & 2G

• 1 RS-232 serial port

• 1 or 5 Ethernet ports

• 1 digital/analog input

• 1 digital output

• Modbus and DNP3 protocols

• Built-in security and routing





RAM® 6000 Cellular RTUs Part Number Cellular Description Default Carrier*

RAM-6900-XX 4G LTE Molex connector version Replace XX:

AT - AT&T

VZ - Verizon

AM – N.A. Generic

EU – Europe/Asia

RAM-6901-XX 4G LTE DC terminal version

RAM-6901EB-XX 4G LTE Power over Ethernet

RAM-6921-XX 4G LTE 5 Ethernet port version

RAM-6600-XX 3G Molex connector version Replace XX:

VZ - Verizon

RAM-6601-XX 3G DC terminal version

RAM-6601EB-XX 3G Power over Ethernet

RAM-6621-XX 3G 5 Ethernet port version

RAM-6800-XX 3G Molex connector version Replace XX:

AT - AT&T

BM - Bell

TE - Telus

GE - Generic

RAM-6801-XX 3G DC terminal version

RAM-6801EB-XX 3G Power over Ethernet

RAM-6821-XX 3G 5 Ethernet port version

*Note only 4G LTE models support multi-carrier operation. Default carrier represents software that unit will boot up with



• Multi-carrier 4G LTE with fallback to 3G and 2G

• RS-485 and RS-232 serial ports

• 2 Ethernet ports

• 2 digital inputs and 3 analog inputs

• 2 digital outputs and 1 relay

• Active GPS for asset location

• Optional Wi-Fi

• UL Class 1, Div. 2, Groups A,B,C & D





• Available with multi-carrier 4G LTE with fallback to 3G/2G

*Note all RAM 9000 models support multi-carrier operation, default carrier represents software that unit will boot up with

Part Number Description Power Input Default Carrier*

RAM-9911-XX RAM 9000 with 2 port

Ethernet

DC terminal version

AT – AT&T

VZ – Verizon

AM – N.A. Generic

EU – Europe/Asia RAM-9931-XX RAM 9000 with 2 port

Ethernet and Wi-Fi

DC terminal version


Physical Model Differences

*RAM® 69xx & 99xx models only

6x00 6x01 6x01EB 6x21 9x11 9x31

Power Connector 4-Pin Molex Terminal Block IEEE802.3af PoE Terminal Block Terminal Block Terminal Block

Ethernet Ports 1 1 1 5 2 2

RS-232 serial 1 1 1 1 1 1

RS-485 serial - - - - 1 1

GPS* Y Y Y Y Y Y

Wi-Fi* - - - - - Y

I/O* 1 1 1 1 5 5

SD Card* - - - - Y Y


Deciphering Model Numbers

Examples:

RAM-6621-VZ – 3G Verizon, 5 Eth

SN-6901EB-EU – 4G European, PoE

iiot products overview - red lion sales meeting - iiot... · confidential: contents of this...

Documents